support.passendo.com
Issued by R3
About this certificate
This digital certificate with serial number 04:4e:ae:a6:8f:bb:38:c8:04:0f:85:d1:8e:31:5a:60:e5:1f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=support.passendo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:4e:ae:a6:8f:bb:38:c8:04:0f:85:d1:8e:31:5a:60:e5:1fSerial Number (int): 375223318854637091557156445622025203016991
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 99:ce:06:89:68:b0:67:f9:7b:9c:68:a1:1b:83:26:d0:3b:8e:8f:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 22:16:07:39:5b:b0:64:e8:7c:1a:b5:58:59:dd:6b:cd:a2:8e:2c:52
Fingerprint (sha256): 7c:57:77:d9:4e:0f:8a:b3:0f:1a:09:ba:24:87:1e:4d:85:a5:51:96:68:1a:48:08:a1:7c:a9:78:64:87:19:2e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate support.passendo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for support.passendo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
support.passendo.com
Other certificates including the domain name passendo.com
(limited to 100 certificates)
passendo.com
admin.passendo.com
site.passendo.com
site.passendo.com
images.passendo.com
images.passendo.com
www.passendo.com
images.passendo.com
admin.passendo.com
*.passendo.com
admin.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
gcp.passendo.com
images.passendo.com
images.passendo.com
passendo.com
passendo.com
images.passendo.com
images.passendo.com
site.passendo.com
site.passendo.com
www.passendo.com
*.passendo.com
images.passendo.com
www.passendo.com
passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
support.passendo.com
images.passendo.com
admin.passendo.com
euir.trckrhst.com
admin.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
admin.passendo.com
images.passendo.com
passendo.com
passendo.com
admin.passendo.com
*.passendo.com
images.passendo.com
www.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
passendo.com
www.passendo.com
gcp.passendo.com
images.passendo.com
euir.trckrhst.com
admin.passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
www.passendo.com
site.passendo.com
images.passendo.com
passendo.com
gcp.passendo.com
passendo.com
passendo.com
images.passendo.com
site.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
admin.passendo.com
admin.passendo.com
site.passendo.com
site.passendo.com
images.passendo.com
images.passendo.com
www.passendo.com
images.passendo.com
admin.passendo.com
*.passendo.com
admin.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
gcp.passendo.com
images.passendo.com
images.passendo.com
passendo.com
passendo.com
images.passendo.com
images.passendo.com
site.passendo.com
site.passendo.com
www.passendo.com
*.passendo.com
images.passendo.com
www.passendo.com
passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
support.passendo.com
images.passendo.com
admin.passendo.com
euir.trckrhst.com
admin.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
admin.passendo.com
images.passendo.com
passendo.com
passendo.com
admin.passendo.com
*.passendo.com
images.passendo.com
www.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
passendo.com
www.passendo.com
gcp.passendo.com
images.passendo.com
euir.trckrhst.com
admin.passendo.com
passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
images.passendo.com
www.passendo.com
site.passendo.com
images.passendo.com
passendo.com
gcp.passendo.com
passendo.com
passendo.com
images.passendo.com
site.passendo.com
images.passendo.com
passendo.com
images.passendo.com
images.passendo.com
admin.passendo.com
Certificate
The complete raw certificate details for support.passendo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISBE6upo+7OMgED4XRjjFaYOUfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDEyMzQxNTlaFw0yNDAyMjkyMzQxNThaMB8xHTAbBgNVBAMT FHN1cHBvcnQucGFzc2VuZG8uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEA1ngryjzKoDwHILRSf3t+OBcDIUrp9A985OJ6E5KnY5z4VdLp2jqiEKqX e1fw+SOVy39NfPdD1FCzKmMb+gRDRUJ26ZNmgCPfexFUsBV9tx4FFNxDj8SsMbl5 pMtSCwRzXYgCnLTEssm5jDdbsp+TnoYdq/CXJVJV46rJ2Rz9j+mvoI/2pcWds1Bb NQF6baJGR/HJuzPJ5SRpMKC0nlG6aLMAVO0iQHPKH/rPJnW+9198wwA5MMlx4Haw Bn6Gl4/54JPGU7ZDuxqK4aQixL5EFByXNxm+W0psqt6Z+bI3JQ1npUJbLLD63xGa ot2crQ+uRTCUG2R/4JDzRV/vxKqxqC48Oyrw3jYB87h92eW4D/lBuppo8OQY0uN7 uwKA11G8PG7xcPBdqJfuWdLqtD1PMAhiOFYs9SNmd6aO3qrOOiHsSqeVL11dgr4M itCBKXCyx7L0+NlwKkdBDbzLpsAkgpYzV4unA39+oBj8/GNiLT0/HKb6JWDLYMbM mYNRWjNwlsAN/A8MifCo0a5Zozxs1EhiLSi2ILJcBHAsBJZkjhHtIKvJpmkWh7z8 o0XqH7W+agEcCWTKVAHKfRO2BFMtZt9PxyfNNSasnLzZbSvnFif9VzwWuR9ChUdD FkZc+2BUetWGZquStltBNkRdDqxOB1XmOzQrHXpvO+0D7cSiUiUCAwEAAaOCASMw ggEfMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUmc4GiWiwZ/l7nGihG4Mm0DuOjz4w HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wHwYDVR0RBBgwFoIUc3VwcG9ydC5wYXNz ZW5kby5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAENe9WuTmqvNQUhZt4TGQhdTG4HiILew8txr rN/6mNQ75Pgz4lXvHCZ3XTsWxOXIG7FCBWvY8OAp5OZ5g0e9u765SE/+plCg6TF3 KRywx3AF87I2kr7XhUJYZ5BPqxOnFk8NpVWpD7/PqlM+RREkSLhYWQcyk2jWFrFZ 2MaSQoVhPKelcP11EQcU3ZY/LydU7OlS6tByEq+SsK4CpSklSLliPoaI5CzDYIot XjKBw4PDwid8LpM4PfZBIoxi9fOTlEm8FVA4e9VPsJQCbzLB9V5S5vO7+eKFoeO9 9wBvaCvfpHMyJrPD1NHkFO/yovL81iGftk+q62GBCL8lTX2QDig= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1ngryjzKoDwHILRSf3t+ OBcDIUrp9A985OJ6E5KnY5z4VdLp2jqiEKqXe1fw+SOVy39NfPdD1FCzKmMb+gRD RUJ26ZNmgCPfexFUsBV9tx4FFNxDj8SsMbl5pMtSCwRzXYgCnLTEssm5jDdbsp+T noYdq/CXJVJV46rJ2Rz9j+mvoI/2pcWds1BbNQF6baJGR/HJuzPJ5SRpMKC0nlG6 aLMAVO0iQHPKH/rPJnW+9198wwA5MMlx4HawBn6Gl4/54JPGU7ZDuxqK4aQixL5E FByXNxm+W0psqt6Z+bI3JQ1npUJbLLD63xGaot2crQ+uRTCUG2R/4JDzRV/vxKqx qC48Oyrw3jYB87h92eW4D/lBuppo8OQY0uN7uwKA11G8PG7xcPBdqJfuWdLqtD1P MAhiOFYs9SNmd6aO3qrOOiHsSqeVL11dgr4MitCBKXCyx7L0+NlwKkdBDbzLpsAk gpYzV4unA39+oBj8/GNiLT0/HKb6JWDLYMbMmYNRWjNwlsAN/A8MifCo0a5Zozxs 1EhiLSi2ILJcBHAsBJZkjhHtIKvJpmkWh7z8o0XqH7W+agEcCWTKVAHKfRO2BFMt Zt9PxyfNNSasnLzZbSvnFif9VzwWuR9ChUdDFkZc+2BUetWGZquStltBNkRdDqxO B1XmOzQrHXpvO+0D7cSiUiUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 375223318854637091557156445622025203016991 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 23:41:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 23:41:58 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.passendo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874958889658830183287294974192072516604247577827932171529202962495921756045798007213786023462667947900944207283192473992704337785224654659341508767911391336168219253703889315977550458406548264604656426549317802650645067811926556237777054023041835035083124027802366546229201971886475338591408870646214763790805102189076964615284910720815715814123830792611694117913098090062099244600484804970072743218160872819303469404565224859090259903402450341181056744795537011499000199546856107842618899715398602880507591181492274345428542528921717091766450061388916554521046341133263053853956513362013545707035890280580182517677281637663454836394190906867470932764728358895184909538155798209366238395318965718019496139056526939890486261532082014268809007407685661841506265641490258600502527506687887546574904279881954923899611629955879085983499054013294540546651921563899524091941868911710284597761625557515610431569570778946513731856410121280013623336277160055741922355284238549069664762739777611262329966252094875511694886168451026853461569913537049588006015730612588698720058951475905944392988436928737079351246268190740648236272332994238454168864355789574175977168597959577429604132354455669458049190592661534919174283935744978152966439719461 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 99ce068968b067f97b9c68a11b8326d03b8e8f3e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.passendo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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